Leverage formattable strings to generate SQL and parameters.

Faithlife / FaithlifeData

Helpers for querying ADO.NET-compatible databases.

https://faithlife.github.io/FaithlifeData/

MIT License

6 stars 4 forks source link

Leverage formattable strings to generate SQL and parameters. #27

Closed ejball closed 3 years ago

ejball commented 3 years ago

Inspired by #20.

Could be extended over time to support differences among SQL syntaxes, escaping SQL keywords, generating names and parameters from DTOs for inserts, injecting literals instead of parameters, joining SQL fragments, etc.

ejball commented 3 years ago

Two against one; I surrender. I still maintain that it looks too much like simple injection, but concede that the extra typing and noise may not be worth it. 6b724c5 (#27)

ejball commented 3 years ago

I can contribute a docs change if you'd like.

That would be great!